AWS bedrock documentation change

Service: bedrock · 2025-08-01 · Documentation low

File: bedrock/latest/userguide/agents-permissions.md

Summary

Replaced placeholder values with concrete examples in IAM policy documentation

Security assessment

Policy example standardization using dummy account IDs (123456789012) and regions without addressing security vulnerabilities or introducing security features

Diff

diff --git a/bedrock/latest/userguide/agents-permissions.md b/bedrock/latest/userguide/agents-permissions.md
index a47a83a33..acd3860ad 100644
--- a//bedrock/latest/userguide/agents-permissions.md
+++ b//bedrock/latest/userguide/agents-permissions.md
@@ -81 +81 @@ JSON
-                        "aws:SourceAccount": "${account-id}"
+                        "aws:SourceAccount": "123456789012"
@@ -84 +84 @@ JSON
-                        "AWS:SourceArn": "arn:aws:bedrock:us-east-1:${account-id}:agent/*"
+                        "AWS:SourceArn": "arn:aws:bedrock:us-east-1:123456789012:agent/*"
@@ -130,3 +130,3 @@ JSON
-                    "arn:aws:bedrock:${region}::foundation-model/anthropic.claude-v2",
-                    "arn:aws:bedrock:${region}::foundation-model/anthropic.claude-v2:1",
-                    "arn:aws:bedrock:${region}::foundation-model/anthropic.claude-instant-v1"
+                    "arn:aws:bedrock:us-east-1::foundation-model/anthropic.claude-v2",
+                    "arn:aws:bedrock:us-east-1::foundation-model/anthropic.claude-v2:1",
+                    "arn:aws:bedrock:us-east-1::foundation-model/anthropic.claude-instant-v1"
@@ -146 +146 @@ JSON
-                        "aws:ResourceAccount": "${account-id}"
+                        "aws:ResourceAccount": "123456789012"
@@ -158 +158 @@ JSON
-                    "arn:aws:bedrock:${region}:${account-id}:knowledge-base/knowledge-base-id"
+                    "arn:aws:bedrock:us-east-1:123456789012:knowledge-base/knowledge-base-id"
@@ -167 +167 @@ JSON
-                "Resource": "arn:aws:bedrock:${region}:${account-id}:knowledge-base/knowledge-base-id",
+                "Resource": "arn:aws:bedrock:us-east-1:123456789012:knowledge-base/knowledge-base-id",
@@ -170 +170 @@ JSON
-                        "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn": "arn:aws:kms:${region}:${account-id}:key/${key-id}"
+                        "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn": "arn:aws:kms:us-east-1:123456789012:key/${key-id}"
@@ -181 +181 @@ JSON
-                    "arn:aws:bedrock:${region}:${account-id}:prompt/prompt-id"
+                    "arn:aws:bedrock:us-east-1:123456789012:prompt/prompt-id"
@@ -210 +210 @@ JSON
-                "arn:aws:bedrock:{${region}}:{${account-id}}:${provisioned-model-id}"
+                "arn:aws:bedrock:us-east-1:123456789012:${provisioned-model-id}"
@@ -239 +239 @@ JSON
-                    "arn:aws:bedrock:us-east-1:${account-id}:agent-alias/${agent-id}/${agent-alias-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:agent-alias/${agent-id}/${agent-alias-id}"
@@ -265 +265 @@ JSON
-                    "arn:aws:bedrock:us-east-1:${account-id}:guardrail/${guardrail-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:guardrail/${guardrail-id}"
@@ -325 +325 @@ JSON
-                "Resource": "arn:aws:lambda:us-east-1:${account-id}:function:function-name",
+                "Resource": "arn:aws:lambda:us-east-1:123456789012:function:function-name",
@@ -328 +328 @@ JSON
-                        "AWS:SourceAccount": "${account-id}"
+                        "AWS:SourceAccount": "123456789012"
@@ -331 +331 @@ JSON
-                        "AWS:SourceArn": "arn:aws:bedrock:us-east-1:${account-id}:agent/${agent-id}"
+                        "AWS:SourceArn": "arn:aws:bedrock:us-east-1:123456789012:agent/${agent-id}"